Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: uWgt7KtwqCMhadVpat+AyOxaYEK4/hgQUKHJZXn0Buk=
Subject key identifier: 72:2E:A1:51:2E:DA:DA:4F:34:DB:94:62:E0:AA:33:06:D2:1A:30:FA
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 019CACB514936C270E08D6434A9611131D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: NwZcawZ1oZBEXy6-sJcGtKyEswU.roa (hash: x1R0gYS1QjDk3Ur01AxDc0zqZ0ZOyidsMEhtEgHTQM0=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: +15EMe5evOD89tYUJ/xNM5tU9b4wApm50Eyt0BX6ST4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:14:93:6c:27:0e:08:d6:43:4a:96:11:13:1d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=722ea1512edada4f34db9462e0aa3306d21a30fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:d4:aa:83:54:90:b5:a5:26:2e:dd:5b:5e:
e0:c2:34:25:bd:19:85:b2:77:e1:f9:fa:58:b3:f1:
ed:b6:0e:ed:47:f7:c2:79:4d:e5:ca:34:10:c8:e8:
d7:a7:a4:e0:5e:47:57:35:c1:aa:39:9c:66:5c:8a:
bb:7c:51:b2:9f:42:c9:44:d6:c9:5c:45:83:82:61:
ad:5b:cc:ee:83:0f:fb:7f:d9:10:83:f4:03:20:2e:
0f:8c:24:2b:05:7e:90:08:0a:8d:9e:27:7f:b6:ce:
09:a6:31:23:47:89:18:8c:fa:6f:e5:91:5e:72:8e:
5d:88:35:ee:f1:65:a1:15:de:53:5a:30:09:b2:4e:
b7:86:84:e8:08:83:09:91:c8:33:d9:56:c0:b4:91:
4b:9e:d9:ff:8c:af:19:11:d7:6d:0c:a9:a7:17:ab:
d0:b1:42:08:6c:47:76:9e:47:11:15:96:6d:13:06:
c9:86:c5:93:55:3d:0a:e3:c0:8c:1a:27:9c:50:53:
7b:8e:92:28:3c:7d:7d:39:28:74:0a:f2:a9:aa:45:
2e:2f:fa:94:96:12:11:24:e6:d9:07:9f:80:70:a2:
87:96:38:96:cd:cd:e9:27:24:b3:4a:db:18:31:01:
a3:79:cc:49:f3:72:c9:50:1c:6f:ed:b2:57:c4:ec:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2E:A1:51:2E:DA:DA:4F:34:DB:94:62:E0:AA:33:06:D2:1A:30:FA
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e2:62:57:53:45:82:bf:83:1c:e1:d2:8c:8e:12:d4:81:c2:
c6:a8:8c:de:aa:97:1f:d5:2a:9c:ad:0e:fc:ec:ae:98:1c:5c:
f5:98:fc:3c:1f:4b:c3:01:ee:4c:ad:18:ac:b1:ea:2c:77:bf:
08:3d:98:c4:1d:f0:49:49:3f:7a:3e:b6:f3:33:7d:c2:2c:16:
f4:80:0f:ec:83:86:cc:81:c8:fc:ec:e8:6c:2e:71:51:d0:9b:
be:85:2d:ae:e9:98:2c:94:59:5d:75:1f:50:f5:cf:47:4b:4d:
3f:18:cd:0d:7d:d9:b8:59:c7:41:11:04:17:36:4b:50:74:ce:
6b:9f:35:0a:43:d6:c1:bb:a0:20:39:0a:75:af:5a:ea:0e:b0:
dc:ac:9e:08:0a:b7:52:d5:69:9e:11:a8:32:5c:c4:11:0f:c2:
92:65:0d:97:cd:0f:d0:b3:07:da:c5:ee:95:b9:09:3e:40:d8:
a1:10:bb:53:36:b4:b3:16:82:74:5e:dd:43:6e:63:71:8f:c7:
2b:13:07:0f:b1:13:86:03:e9:70:92:6d:1f:c7:98:28:4d:a0:
e7:2c:f1:76:15:8a:8b:c9:2d:0b:fb:df:b8:50:1b:a4:ad:b4:
50:ec:f6:44:5a:43:48:86:ce:ba:69:dd:64:f1:aa:12:2f:07:
1d:97:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:49 2026 by rpki-client